CVE-2026-8147

{
  "id": "CVE-2026-8147",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-02T09:16:19.100",
  "lastModified": "2026-10-25T21:10:00.770",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` handler, which does not register authorization validators for trace endpoints, resulting in requests proceeding without validation. This vulnerability can expose sensitive data, destroy audit logs, and allow unauthorized modifications."
    },
    {
      "lang": "es",
      "value": "En versiones de MLflow anteriores a la 3.14.0, cuando se ejecuta con la autenticación habilitada, los puntos finales de la API de trazas carecen de validadores de autorización adecuados. Esto permite a cualquier usuario autenticado eludir los controles de autorización a nivel de experimento en todas las operaciones de traza, incluyendo la lectura, eliminación y modificación de trazas en experimentos a los que no tienen permiso de acceso. El problema surge del gestor ’_before_request’, que no registra validadores de autorización para los puntos finales de traza, lo que resulta en que las solicitudes proceden sin validación. Esta vulnerabilidad puede exponer datos sensibles, destruir registros de auditoría y permitir modificaciones no autorizadas."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "mlflow",
          "product": "mlflow/mlflow",
          "versions": [
            {
              "version": "unspecified",
              "lessThan": "3.14.0",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV30": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.0",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-02T12:28:27.236676Z",
          "id": "CVE-2026-8147",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    },
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "3.14.0",
              "matchCriteriaId": "AD046C6D-0AF3-499E-A9D8-6BE7C0BEA278"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/mlflow/mlflow/commit/f9b1eb510478570609ef451984a255775aa4b937",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    }
  ]
}